In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthese_scope in prelexer.hpp.
References
Link | Resource |
---|---|
http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00047.html | Broken Link |
http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00051.html | Broken Link |
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00027.html | Broken Link |
https://github.com/sass/libsass/issues/2814 | Exploit Third Party Advisory |
Configurations
History
28 Feb 2023, 20:44
Type | Values Removed | Values Added |
---|---|---|
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00027.html - Broken Link | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00047.html - Broken Link | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00051.html - Broken Link |
Information
Published : 2019-01-14 22:29
Updated : 2024-02-04 20:03
NVD link : CVE-2019-6283
Mitre link : CVE-2019-6283
CVE.ORG link : CVE-2019-6283
JSON object : View
Products Affected
sass-lang
- libsass
CWE
CWE-125
Out-of-bounds Read